
Error: rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft
File: 7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft (raw, json)
Hash identifier: 4xex2QFGvt6rCKc7KUYrtxtZNZGKEm8K+rtNmcLTTGU=
Subject key identifier: 7A:C5:07:D0:D6:08:7E:6C:34:58:89:F6:BD:EC:9F:DC:37:AC:AD:52
Authority key identifier: 76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B
Certificate issuer: /CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B
Certificate serial: 1E0DF1580C56BBB188CFD71401DD2349CA32ECC5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft
Manifest number: 04C8
Signing time: Mon 19 Oct 2026 22:51:34 +0000
Manifest this update: Mon 19 Oct 2026 22:46:34 +0000
Manifest next update: Wed 21 Oct 2026 00:19:34 +0000
Files and hashes: 1: 323830343a326635303a3a2f33322d3334203d3e20323634383833.roa (hash: z4/BdNYNko5mnyyuXaWWxZuFRYLrcXeY5FpOZmSV9G4=)
2: 3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa (hash: DLGbpR5dFrKFyzVeNNFio6hSiOD3ZmtgLNk4C+7OCEU=)
3: 7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl (hash: 7bqbTmfvodUe7+YavLcBUJxqiahfz7Rwdx3EQKv0NjQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl
rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 21 Oct 2026 00:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:0d:f1:58:0c:56:bb:b1:88:cf:d7:14:01:dd:23:49:ca:32:ec:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B
Validity
Not Before: Oct 19 22:46:34 2026 GMT
Not After : Oct 21 00:19:34 2026 GMT
Subject: CN=7AC507D0D6087E6C345889F6BDEC9FDC37ACAD52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:31:1c:1f:7f:70:0e:87:50:49:00:dc:7e:
4d:6d:58:87:6f:ec:ff:06:b3:54:75:fb:3e:2a:21:
72:4c:7c:5d:7f:2f:ef:97:c6:30:5a:cb:e7:07:0d:
65:59:31:e9:8e:70:14:cd:ec:e6:d7:8c:e9:81:06:
2f:ff:62:41:62:00:0f:83:c3:1c:74:0b:a8:ed:68:
14:e7:78:85:c9:db:ae:5f:a9:46:b9:26:26:41:7e:
16:ce:a9:62:17:92:d9:6d:f3:4b:43:a5:c0:4e:5a:
20:d6:22:82:ef:e1:1f:c7:0d:50:ab:6f:ea:6c:0f:
d8:3f:bf:55:17:64:3b:b4:6b:c0:c2:92:6d:12:be:
f8:75:9c:b6:58:27:11:17:6a:3b:9d:e0:5e:42:0d:
c7:0e:7d:68:af:4e:32:ec:13:07:3c:1f:c6:72:ec:
99:27:13:ad:b6:67:96:03:53:81:e8:f1:0a:38:51:
09:47:d6:69:c7:dc:8d:e6:ac:4f:93:37:8b:0d:43:
44:df:fb:71:27:f0:d6:c7:e3:95:0b:7b:cf:89:93:
3a:40:c1:db:f4:59:4d:6e:49:89:40:71:33:a6:97:
8c:9e:e8:b4:3d:b4:d1:f6:52:3b:2d:02:60:55:21:
50:40:8c:c0:1e:8d:71:54:2d:b6:87:c3:13:d4:97:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C5:07:D0:D6:08:7E:6C:34:58:89:F6:BD:EC:9F:DC:37:AC:AD:52
X509v3 Authority Key Identifier:
keyid:76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ce:ba:01:66:68:66:4c:a4:2c:2e:88:ec:d2:ef:c6:1d:da:
9d:ca:6b:06:4d:08:9a:3a:12:06:75:e0:c0:46:6f:af:3d:c7:
a1:74:db:8f:67:b1:96:40:05:41:df:c9:89:71:9d:64:f5:99:
e6:2d:61:b1:90:b0:8f:d8:e1:9f:bc:9b:f6:5e:d7:ab:13:ec:
43:94:6d:3c:c8:fa:fb:cf:b9:b4:4f:c7:c7:bf:de:00:73:e0:
29:27:e1:f8:51:8c:17:f0:46:a4:58:12:ba:ec:86:62:4f:ec:
ed:0d:b5:22:46:4a:d8:c4:81:bd:45:b2:ac:34:81:7f:1f:96:
3e:d9:d2:81:43:c6:16:6c:c4:b9:a7:c9:b5:0a:79:74:0c:ff:
91:64:b6:e5:e4:3f:26:97:4b:cb:41:ba:14:67:66:d0:34:74:
45:36:1f:eb:ef:39:d9:55:de:c0:d6:14:af:6f:2c:56:6e:45:
ba:03:0d:08:9d:b4:77:44:5f:23:f6:4e:60:3f:5d:1c:92:0c:
7c:58:83:82:80:12:9a:dd:96:8e:fc:1e:86:63:c9:78:cd:e0:
7c:b8:af:11:9f:82:0f:af:64:35:13:71:de:61:71:0b:30:55:
3e:55:25:15:b2:37:78:5a:19:21:08:2e:0b:c9:58:d0:49:c2:
eb:f3:61:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:44:49 2026 by rpki-client